97075ba0025848474aa44cb47ca003d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97075ba0025848474aa44cb47ca003d1_JaffaCakes118
Size

86KB
MD5

97075ba0025848474aa44cb47ca003d1
SHA1

e85aa56876a2aa242a09a5f1b169b33219fb60ea
SHA256

8ae7d086f219f1362ea5430712b8a57e7952501f0d3983a106903fdd99d50666
SHA512

555d8fcdd69350525ebd8ada746a005099619f2ec02472f546b321138e5f7cad66205568c1d9e613d4d1afce74aeb02a72fb7a4fed82d7f3dd603f7cc99242fe
SSDEEP

1536:TgImDHK2RG9Tuw0AUldIiTXHn4zhmuJh1XwA8fEa6PTx2q2fTYU0t0l5snRx:T8DHtwxkXHnYh71frx2Tx0t+SX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97075ba0025848474aa44cb47ca003d1_JaffaCakes118

Files

97075ba0025848474aa44cb47ca003d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e950e96380a9be5c031f0e641e34280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
LocalHandle
ClearCommBreak
UnregisterWait
ResetEvent
LZOpenFileW
GetVolumeInformationW
GlobalFindAtomW
FindActCtxSectionStringA
GetComputerNameA
TryEnterCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ice
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE